Privacy policy

Who is responsible for this website

This website, strateva.ai, is operated by Nicolae Filip Stanciu ("Strateva"), an independent quantitative research validation practice. For any privacy request you can write to stan@strateva.ai or, alternatively, contact me through the LinkedIn profile linked in the footer of this website.

What data is processed

This website has no user accounts and no forms. Apart from the email you may choose to send me, described below, it does not ask you for personal data.

Two preferences are stored only in your browser (localStorage) and are never transmitted to a server: your language choice and your cookie-consent choice.

Only if you accept analytics cookies, Google Analytics 4 processes usage data such as pages visited, approximate location derived from your IP address, and device and browser information, so that aggregate visit statistics can be produced.

Contacting me about a validation

This website has no contact form and no third-party form provider. The contact buttons open a pre-filled message in your own mail client, addressed to stan@strateva.ai; nothing is sent until you send it, and no data reaches Strateva — or anyone else — before that.

I process the information you choose to send by email — your name, your email address, the strategy and the asset, timeframe and validation period it applies to, the results you declare having obtained (Sharpe ratio, return, maximum drawdown, benchmark and costs included), how many configurations you tried, and anything else you decide to add — in order to respond to your request, assess the scope of the project, decide whether the engagement is feasible and prepare a possible proposal. The message template only suggests those fields; what you actually send is entirely your choice.

You may also attach technical material to that email: code, a notebook, a repository or an extract of market data. That material is treated as your confidential information and is used solely to run the validation you requested. It is not published, not reused in other engagements, and not shared with anyone beyond the email providers strictly necessary to transmit and store the message — yours and the one hosting the strateva.ai mailbox — which is inherent to sending an email at all. Should the process ever incorporate third-party tooling to analyse the material, this policy will say so before that happens. Please do not attach credentials, API keys or third-party personal data: if any appear regardless, they are deleted as soon as they are detected.

I delete every copy I control within a maximum of 7 calendar days from delivery of the report: the working copies and the message with its attachment, including the mailbox bin. That window exists so I can answer your questions about the verdict and review any discrepancy. If you would rather it were deleted sooner, just ask by email.

What I cannot promise, because it does not depend on me: how long the email providers keep their own copies and backups once a message is deleted. That is set by their retention policies, not by mine, and it applies to your provider as much as to the one hosting my mailbox. If that matters for your material, send a link to storage you control instead of an attachment, or ask and we agree another way of getting it to me.

The legal basis is taking pre-contractual measures at your request (art. 6.1.b GDPR) and, where applicable, the legitimate interest in answering professional enquiries (art. 6.1.f GDPR). Contact data and the case description are kept while the request is open and, afterwards, only for as long as needed to meet legal obligations or defend a possible claim.

Hosting and technical logs

This website is hosted on Railway (Railway Corp., United States). When you access the site, the hosting infrastructure temporarily processes technical request data in HTTP access logs, such as your IP address, user agent, requested path, timestamp and request identifiers.

This processing is strictly needed to provide, secure and diagnose the service, on the basis of legitimate interest (art. 6.1.f GDPR). These logs are kept for the limited period defined by the hosting configuration and are not used to identify visitors or build profiles. As the provider is based in the United States, this technical data may be processed there under the applicable safeguards.

Purpose and legal basis of analytics

The only purpose of analytics is measuring how the website is used in order to improve it. The legal basis is your consent (art. 6.1.a GDPR), which is requested through the cookie banner before any analytics runs and can be withdrawn at any time from the cookie policy page.

Recipients and international transfers

Analytics data is processed by Google (Google Ireland Ltd. and Google LLC) as a processor. Google may transfer data to the United States under the EU–U.S. Data Privacy Framework and standard contractual clauses.

An email you send is delivered and stored by email providers — your own, and the one hosting the strateva.ai mailbox. That is inherent to email rather than something this website does: the website itself sends nothing and never sees the message. No analytics identifier, tracking parameter or reference to your visit is attached to it.

Retention

Technical material sent by email is deleted from every copy I control within a maximum of 7 calendar days from delivery of the report; what the email providers keep afterwards is set by their policies, not mine. Google Analytics event data is retained for up to 14 months. The preferences stored in your browser remain until you delete them or withdraw consent.

Your rights

You can request access, rectification, erasure, restriction, portability and objection, and withdraw your consent at any time, by writing to stan@strateva.ai (or, alternatively, through LinkedIn). You can also lodge a complaint with the Spanish supervisory authority (AEPD, www.aepd.es).

Changes to this policy

Any change to this policy will be published on this page with an updated date.